On Thu, 12 May 2011 13:10:47 +0200, Martin Pelikan wrote: >2011/5/12 Tom Murphy <[email protected]>: >> Can someone recommend what the qlimit and tbr should be when throttling >> a connection to just under 100 megabits? > >From what I observed, for TCP are the defaults mostly sufficient (if >you're not running tests originating at the router). I've never played >with tbr (didn't need to). >As for UDP, I use qlen 600 because of small DNS bursts (usually once >per two hours); apart from suppressing messages in logs I don't think >it was actually necessary. It usually handles from 40 to 120 mbit/s of >traffic. > >> One of my concerns is we have an OpenVPN running with UDP. Lots of >> dropped packets would be rather catastrophic for it. > >When dropped packets are 'rather catastrophic', why on earth do you >use udp then?
In case the OP is not around or doesn't know why OpenVPN uses UDP, it's because they are tunneling TCP over UDP. Tunneling TCP over TCP is unreliable. See:http://sites.inka.de/bigred/devel/tcp-tcp.html R/ *** NOTE *** Please DO NOT CC me. I <am> subscribed to the list. Mail to the sender address that does not originate at the list server is tarpitted. The reply-to: address is provided for those who feel compelled to reply off list. Thankyou. Rod/ --- This life is not the real thing. It is not even in Beta. If it was, then OpenBSD would already have a man page for it.
